Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08/05/2024, 14:22
General
-
Target
AvisoCobranca.exe
-
Size
66KB
-
MD5
d64b1432895d8518b29187556c6677d6
-
SHA1
632e2cc126ad144eef3c3e4b804ba8e2fb67ed40
-
SHA256
727008de4a36996ce2a59db428c23aee9e95cfeb2226c780f4dfef2e9357da8e
-
SHA512
59563592bc59d8dfef2afed99333935f9689ebc2c9f04734008f71956056b25bf781513b4ae906ccf5eb0e8c87eaffb5002993b30fe4954a927ed8dc1da3ba4e
-
SSDEEP
1536:z2kIq3dVrtBtzVHdPyQ6QTJWJ1+7MqmFdaKZWrP/53KxbfniE/5AAyt630:3Iq3dVX6ChrIRnisytw0
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AvisoCobranca.exe"C:\Users\Admin\AppData\Local\Temp\AvisoCobranca.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2128 -s 7002⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
88KB
-
Filesize
8.2MB
-
Filesize
9.9MB
-
Filesize
26.6MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
9.9MB